Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20edd092-946e-4a92-8499-1c90ec2f1b10.roa
File:                     20edd092-946e-4a92-8499-1c90ec2f1b10.roa (raw, json)
Hash identifier:          fIgz/FxGlUJxm9czxMf1v+y89nQiPLDVYGAZrMUEueo=
Subject key identifier:   D0:AE:2F:6C:23:EF:E1:30:61:E7:FD:CB:4F:4E:98:93:46:03:73:86
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       22AEFFDC587396D5D68B52C869CD2461B60B2612
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20edd092-946e-4a92-8499-1c90ec2f1b10.roa
Signing time:             Fri 03 May 2024 00:00:00 +0000
ROA not before:           Fri 03 May 2024 00:00:00 +0000
ROA not after:            Fri 07 Jun 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        185.251.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ae:ff:dc:58:73:96:d5:d6:8b:52:c8:69:cd:24:61:b6:0b:26:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  3 00:00:00 2024 GMT
            Not After : Jun  7 23:59:59 2024 GMT
        Subject: serialNumber=b9a2bfe964d044b776216b6ec94364b0a242d0dd3834d078fadcab015400344c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:26:5f:c6:88:86:87:70:1d:84:d0:65:e3:c4:
                    d7:c8:0f:6b:4b:1b:01:81:4f:10:d4:94:a6:03:87:
                    e2:32:70:01:1f:0e:fa:16:36:75:c6:db:9d:07:91:
                    9f:19:81:ec:aa:eb:25:5c:20:8b:a8:a2:46:c7:c3:
                    93:c9:db:20:08:85:c0:dd:8b:02:58:e4:af:3b:b3:
                    fb:37:90:0b:96:bd:c3:c8:4e:92:14:cb:b3:32:ae:
                    12:0b:6c:6b:35:1e:d6:ba:55:bb:4e:68:bd:90:55:
                    5f:ff:b9:f4:c9:71:bd:28:15:11:3a:93:9a:75:19:
                    d1:62:7a:99:9b:27:a7:30:ea:d7:cd:a6:f7:9b:cd:
                    b0:eb:36:e2:cf:a0:43:76:45:ec:fa:90:0a:8c:03:
                    ad:7e:64:0e:4a:44:16:fe:5c:b1:c5:eb:87:a8:92:
                    4a:a0:5a:a2:34:d4:65:57:b1:93:3f:5d:44:6c:23:
                    7b:50:8d:88:21:79:2f:7e:54:75:b8:8b:1e:f8:59:
                    04:54:ba:f3:c3:99:a7:44:7b:18:f9:88:36:28:5d:
                    c5:33:3c:e7:a0:bd:ac:62:c7:ed:7d:f1:c1:ef:14:
                    ee:16:3c:fa:a1:b6:8e:5e:d7:8b:ec:9e:af:67:44:
                    44:ab:98:51:c0:cf:e5:c9:18:19:bb:fc:02:36:d2:
                    09:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AE:2F:6C:23:EF:E1:30:61:E7:FD:CB:4F:4E:98:93:46:03:73:86
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20edd092-946e-4a92-8499-1c90ec2f1b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:c0:72:00:7b:1a:57:16:ff:ce:44:ce:04:5d:d2:dd:3e:4b:
         85:cd:d5:4d:f5:7c:89:72:60:51:f7:dc:dd:64:72:b2:09:fa:
         56:a6:1e:c0:37:47:68:ef:1f:18:bd:2e:d1:43:e5:39:f6:b7:
         3f:47:2c:f7:06:f2:90:32:23:1a:4f:9d:18:1a:fb:bd:b7:c4:
         61:5d:db:1b:ed:e5:03:71:c4:1f:aa:54:b9:e6:5c:80:c9:8e:
         15:98:2a:f9:7b:be:3b:0f:02:5c:25:84:82:1b:00:51:89:13:
         2e:17:70:79:e4:d3:0d:02:bc:6a:16:89:a2:52:81:4d:14:7a:
         86:ae:9e:da:14:72:ad:6a:64:c8:60:55:4d:8f:15:b3:40:34:
         e9:ee:5c:42:ed:66:f7:d6:b5:76:b9:e5:91:19:f3:2a:6d:33:
         35:19:57:70:1a:23:48:7c:a6:67:d9:87:27:e9:cf:d7:a8:ed:
         92:a0:88:54:9a:d8:e0:97:f7:9a:63:5d:a0:6a:6c:93:34:a4:
         b6:82:ef:0a:81:40:18:11:ee:33:4e:ff:0e:e2:da:35:62:eb:
         3d:db:6b:91:29:e8:4e:e1:cb:53:73:27:2b:c1:0a:c9:31:c5:
         6c:e8:d9:2d:73:52:e5:6c:6a:18:70:65:f0:b4:19:50:23:b4:
         13:f2:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:27:50 2024 by rpki-client on console-fra.rpki-client.org